Tools Crypto Exploit Tracker exploit-0115
Exploit record
Cork Protocol wstETH Exploit
- Loss
- $12M
- Attack vector
- Other
- Chain
- Ethereum
- Sector
- Yield
What happened
On May 28, 2025, Cork Protocol lost about $12M after a flaw around wrapped staking asset exchange-rate logic was abused via a Uniswap v4 hook vulnerability.
Counterfeit or distorted pricing inside wrapped-asset accounting is a reliable way to make real collateral vanish. Dedaub's analysis highlighted this as a critical lesson in Uniswap v4 hook security, given that Cork was an a16z-backed project.
Sources
- Cork official post-mortemwww.cork.tech/blog/post-mortem
- Dedaub analysisdedaub.com/blog/the-11m-cork-protocol-hack-a-critical-lesson…
- CertiK incident analysiswww.certik.com/resources/blog/cork-protocol-incident-analysi…
- Halborn post-mortemwww.halborn.com/blog/post/explained-the-cork-protocol-hack-m…
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026